From 31aface871f980c02b67fd0973c1e50da3189301 Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Thu, 7 May 2026 14:35:58 +0200 Subject: [PATCH 1/7] chore(deps): Add Dependabot for Gradle plugins Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b88a67a7f0c..990c76183d8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,18 @@ version: 2 +registries: + gradle-plugin-portal: + type: maven-repository + url: https://plugins.gradle.org/m2 + username: dummy # Required by dependabot + password: dummy # Required by dependabot updates: + - package-ecosystem: "gradle" + directory: "/" + registries: + - gradle-plugin-portal + schedule: + interval: "daily" - package-ecosystem: "github-actions" directory: "/" schedule: - interval: weekly + interval: "daily" From d5e8da0a8aae476cb2c7d93b97952ac2782902f6 Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Thu, 7 May 2026 14:38:05 +0200 Subject: [PATCH 2/7] chore(deps): Exclude Spring Boot from Dependabot Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 990c76183d8..55f020c3a54 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,6 +12,8 @@ updates: - gradle-plugin-portal schedule: interval: "daily" + ignore: + - dependency-name: "org.springframework.boot*" - package-ecosystem: "github-actions" directory: "/" schedule: From c0d46fd1ee357f80381f67dca888cb5dc9a3164e Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Thu, 7 May 2026 14:41:03 +0200 Subject: [PATCH 3/7] chore(deps): Add commit message prefix for Dependabot Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 55f020c3a54..de0ec42a9ff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,7 +14,11 @@ updates: interval: "daily" ignore: - dependency-name: "org.springframework.boot*" + commit-message: + prefix: "chore(deps)" - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" + commit-message: + prefix: "chore(deps)" From b24596c6c8c4a1836b93d7938208c5236c07431e Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Fri, 8 May 2026 10:59:13 +0200 Subject: [PATCH 4/7] chore(deps): Set dependabot to weekly and add dependency grouping Switch both gradle and github-actions ecosystems from daily to weekly. Group related dependencies so they're updated together in single PRs (androidx, compose, kotlin, spring, opentelemetry, graphql, jackson, and all github-actions). Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++-- 1 file changed, 32 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index de0ec42a9ff..49b5058de5a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,14 +11,44 @@ updates: registries: - gradle-plugin-portal schedule: - interval: "daily" + interval: "weekly" ignore: - dependency-name: "org.springframework.boot*" commit-message: prefix: "chore(deps)" + groups: + androidx: + patterns: + - "androidx.*" + compose: + patterns: + - "androidx.compose*" + - "org.jetbrains.compose*" + kotlin: + patterns: + - "org.jetbrains.kotlin*" + - "org.jetbrains.kotlinx*" + spring: + patterns: + - "org.springframework*" + - "io.spring*" + opentelemetry: + patterns: + - "io.opentelemetry*" + graphql: + patterns: + - "com.graphql-java*" + - "com.apollographql*" + jackson: + patterns: + - "com.fasterxml.jackson*" - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" commit-message: prefix: "chore(deps)" + groups: + github-actions: + patterns: + - "*" From b7490244a71863b6e1a752a6f33bbb42e22bb0da Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Fri, 8 May 2026 10:59:28 +0200 Subject: [PATCH 5/7] fixup: Remove gradle dependency groups, keep only gh-actions group Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 26 -------------------------- 1 file changed, 26 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 49b5058de5a..24f77f7d955 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,32 +16,6 @@ updates: - dependency-name: "org.springframework.boot*" commit-message: prefix: "chore(deps)" - groups: - androidx: - patterns: - - "androidx.*" - compose: - patterns: - - "androidx.compose*" - - "org.jetbrains.compose*" - kotlin: - patterns: - - "org.jetbrains.kotlin*" - - "org.jetbrains.kotlinx*" - spring: - patterns: - - "org.springframework*" - - "io.spring*" - opentelemetry: - patterns: - - "io.opentelemetry*" - graphql: - patterns: - - "com.graphql-java*" - - "com.apollographql*" - jackson: - patterns: - - "com.fasterxml.jackson*" - package-ecosystem: "github-actions" directory: "/" schedule: From d585e6ef4599526fae90fdd1f7a8b4c66d1ac34c Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Fri, 8 May 2026 11:00:27 +0200 Subject: [PATCH 6/7] chore(deps): Add gradle dependency groups for androidx, compose, kotlin, jackson Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 24f77f7d955..af982b1b771 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,6 +16,21 @@ updates: - dependency-name: "org.springframework.boot*" commit-message: prefix: "chore(deps)" + groups: + androidx: + patterns: + - "androidx.*" + compose: + patterns: + - "androidx.compose*" + - "org.jetbrains.compose*" + kotlin: + patterns: + - "org.jetbrains.kotlin*" + - "org.jetbrains.kotlinx*" + jackson: + patterns: + - "com.fasterxml.jackson*" - package-ecosystem: "github-actions" directory: "/" schedule: From 38f10886ff555f05a493be72eb25d13d14ad8158 Mon Sep 17 00:00:00 2001 From: Nelson Osacky Date: Fri, 8 May 2026 11:18:05 +0200 Subject: [PATCH 7/7] chore(deps): Set dependabot to daily and reorder compose group Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/dependabot.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index af982b1b771..10325576354 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,19 +11,19 @@ updates: registries: - gradle-plugin-portal schedule: - interval: "weekly" + interval: "daily" ignore: - dependency-name: "org.springframework.boot*" commit-message: prefix: "chore(deps)" groups: - androidx: - patterns: - - "androidx.*" compose: patterns: - "androidx.compose*" - "org.jetbrains.compose*" + androidx: + patterns: + - "androidx.*" kotlin: patterns: - "org.jetbrains.kotlin*" @@ -34,7 +34,7 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "daily" commit-message: prefix: "chore(deps)" groups: